test/testdata/apparmor_test_deny_write


1
2
3
4
5
6
7
8
9
10

#include <tunables/global>

profile apparmor-test-deny-write flags=(attach_disconnected) {
  #include <abstractions/base>

  file,

  # Deny all file writes.
  deny /** w,
}